Unbound DNS Server NSEC3 Signature Verification DNS Spoofing Vulnerability

Bugtraq ID:	37459
Class:	Design Error
CVE:	CVE-2009-3602
Remote:	Yes
Local:	No
Published:	Oct 07 2009 12:00AM
Updated:	Feb 23 2010 06:32PM
Credit:	Unbound
Vulnerable:	Unbound Unbound 1.3.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Unbound Unbound 1.3.4

Unbound DNS Server NSEC3 Signature Verification DNS Spoofing Vulnerability

Unbound DNS Server is prone to a DNS-spoofing vulnerability.

Successful exploits allow remote attackers to spoof delegation responses so as to downgrade secure delegations to insecure status, which may aid in further attacks.

Versions prior to Unbound 1.3.4 are vulnerable.

Unbound DNS Server NSEC3 Signature Verification DNS Spoofing Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Unbound DNS Server NSEC3 Signature Verification DNS Spoofing Vulnerability

Solution:
Updates are available. Please see the references for details.


Debian Linux 5.0 hppa

• Debian libunbound-dev_1.0.2-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_hppa.deb


• Debian libunbound0_1.0.2-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_hppa.deb


• Debian unbound-host_1.0.2-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_hppa.deb


• Debian unbound_1.0.2-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_hppa.deb

Debian Linux 5.0 ia-64

• Debian libunbound-dev_1.0.2-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_ia64.deb


• Debian libunbound0_1.0.2-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_ia64.deb


• Debian unbound-host_1.0.2-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_ia64.deb


• Debian unbound_1.0.2-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_ia64.deb

Debian Linux 5.0 arm

• Debian libunbound-dev_1.0.2-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_arm.deb


• Debian libunbound0_1.0.2-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_arm.deb


• Debian unbound-host_1.0.2-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_arm.deb


• Debian unbound_1.0.2-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_arm.deb

Debian Linux 5.0 armel

• Debian libunbound-dev_1.0.2-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_armel.deb


• Debian libunbound0_1.0.2-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_armel.deb


• Debian unbound-host_1.0.2-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_armel.deb


• Debian unbound_1.0.2-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_armel.deb

Debian Linux 5.0 amd64

• Debian libunbound-dev_1.0.2-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_amd64.deb


• Debian libunbound0_1.0.2-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_amd64.deb


• Debian unbound-host_1.0.2-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_amd64.deb


• Debian unbound_1.0.2-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_amd64.deb

Debian Linux 5.0 alpha

• Debian libunbound-dev_1.0.2-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_alpha.deb


• Debian libunbound0_1.0.2-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_alpha.deb


• Debian unbound-host_1.0.2-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_alpha.deb


• Debian unbound_1.0.2-1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian libunbound-dev_1.0.2-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_i386.deb


• Debian libunbound0_1.0.2-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_i386.deb


• Debian unbound-host_1.0.2-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_i386.deb


• Debian unbound_1.0.2-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_i386.deb

Debian Linux 5.0 mips

• Debian libunbound-dev_1.0.2-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_mips.deb


• Debian libunbound0_1.0.2-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_mips.deb


• Debian unbound-host_1.0.2-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_mips.deb


• Debian unbound_1.0.2-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_mips.deb

Debian Linux 5.0 s/390

• Debian libunbound-dev_1.0.2-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_s390.deb


• Debian libunbound0_1.0.2-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_s390.deb


• Debian unbound-host_1.0.2-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_s390.deb


• Debian unbound_1.0.2-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian libunbound-dev_1.0.2-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_mipsel.deb


• Debian libunbound0_1.0.2-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_mipsel.deb


• Debian unbound-host_1.0.2-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_mipsel.deb


• Debian unbound_1.0.2-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_mipsel.deb

Debian Linux 5.0 powerpc

• Debian libunbound-dev_1.0.2-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_powerpc.deb


• Debian libunbound0_1.0.2-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_powerpc.deb


• Debian unbound-host_1.0.2-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_powerpc.deb


• Debian unbound_1.0.2-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian libunbound-dev_1.0.2-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound-dev_ 1.0.2-1+lenny1_sparc.deb


• Debian libunbound0_1.0.2-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/u/unbound/libunbound0_1.0 .2-1+lenny1_sparc.deb


• Debian unbound-host_1.0.2-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound-host_1. 0.2-1+lenny1_sparc.deb


• Debian unbound_1.0.2-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/u/unbound/unbound_1.0.2-1 +lenny1_sparc.deb

Unbound DNS Server NSEC3 Signature Verification DNS Spoofing Vulnerability

References:

• [Unbound-users] Release of unbound 1.3.4 (W.C.A. Wijngaards )
  
• Unbound Homepage (Unbound)